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3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 
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Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
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DETAILED ACTION 
Continued Examination Under 37 CFR 1.114 

1. A request for continued examination under 37 CFR 1.114, including the 
fee set forth in 37 CFR 1 .17(e), was filed in this application after final rejection. 
Since this application is eligible for continued examination under 37 CFR 1.114, 
and the fee set forth in 37 CFR 1 .17(e) has been timely paid, the finality of the 
previous Office action has been withdrawn pursuant to 37 CFR 1.1 14. 
Applicant's submission filed on 11/29/2004 has been entered. 

2. The text of those sections of Title 35,U.S.Code not included in this section 
can be found in the prior office action. 

3. The prior office actions are incorporated herein by reference. In particular, 
the observations with respect to claim language, and response to previously 
presented arguments. 

4. New claims 40-45 have been added. 

5. Claims 1-45 are pending. 

Response to Arguments 

6. Applicant's arguments with respect to the claims have been considered 
but are moot in view of the new ground(s) of rejection. 
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Claim Rejections - 35 USC § 103 

7. Claims 1-6, 9-14, 17-25, 28-34, and 37 are rejected under 35 

U.S.C. 103(a) as being unpatentable over Chan et al (2002/0019941 A1) in view 

of Schmeidler et al. (6,763,370 B1). 

As per claims 1-6, 9-14, 17-25, 28-34, and 37, Chan et al discloses the 
determination of a digital signature verification error (see page 8, second column, 
third paragraph', page 9, first column, first paragraph 1 , and page 10, first column, 
second paragraph) and the generation of a digital signature verification map (see 
page 8, first column, third paragraph and page 9, second column, third and fourth 
paragraphs) but do not explicitly disclose association of the digital signature with 
corresponding public key (generating digital signature using public key). However 
Schmeidler et al. (6,763,370 B1) disclose association of the digital signature with 
corresponding public key (generating digital signature using public key) see 
col.26, lines 55-59). It would have been obvious to one of ordinary skilled in the 
art at the time the invention was made to utilize Schmeidler's public key digital 
signature algorithm in Chan's method, apparatus and storage medium signature 
verification error detection in order to provide security to protect the value of the 
content and prevents unauthorized use and copying thereof (see scmeidler col.2, 
lines 21-23). 
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As per claims 2, 5, 21 , 24, 30, and 33, in addition to the teachings applied 
above, Chan et al discloses the storage, receipt, and digital signature verification 
map update Page 9 of at least one acceptable message header identifier, which 
becomes a map entry (see page 8, first column, third paragraph, last sentence 
and page 10, first column, first and second paragraphs). 

As per claims 3, 22, and 31 , in addition to the teachings applied above, Chan et 
al discloses that the generation step includes mapping the plurality of acceptable 
message header identifiers on a per certificate subject identification basis (see 
page 8, first column, third paragraph). 

As per claims 4, 10, 12, 18, 23, and 32, in addition to the teachings applied 
above, Chan et al discloses the verification of a digital signature associated with 
received message information (see page 8, second column, third paragraph 1 , 
page 9, first column, first paragraph', page 9, second column, third paragraph 1 , 
and page 10, first column, second paragraph). 

As per claims 6, 14, 25, and 34, in addition to the teachings applied above, 
Chan et al discloses that the message header identifier includes at least one of 
data representing a sender's email address, telephone number, and unit identifier 
(page 8, first column, third paragraph; page 9, second column, second 
paragraph; and page 9, second column, third paragraph, second sentence). 
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As per claims 9, 11, 13, 19, 28, and 37, in addition to the teachings applied 
above, Chan et al discloses that the determination of a digital signature 
verification error includes the comparison of a public key certificate identifier with 
the message header identifier (see page 8, second column, third paragraph), the 
generation of a mismatch notification (see "appropriate error code" on page 8, 
second column, third paragraph, second sentence), and the verification of a 
digital signature based on a verification key associated with the public key 
certificate identifier (See the certificate of the stated message source and SID 
based on this certificate on page 8, first column, third paragraph 1 , page 8, second 
column, third paragraph 1 , and page 9, first column, first paragraph. Also see the 
digital signature of the message that ensures the authenticity of the message 
source and has a verification key ensured by the above certificate on page 9, 
second column, third paragraph and page 10, first column, second paragraph.). 

As per claim 7, 15, 26 and 35 Chan et al Chan et al (2002/0019941 A1) in view 
of Schmeidler et al. (6,763,370 B1) discloses the determination of a 
digital signature verification error (see page 8, second column, third paragraph 1 , 
page 9, first column, first paragraph', and page 10, first column, second 
paragraph) and the generation of a digital signature verification map (see page 8, 
first column, third paragraph and page 9, second column, third and fourth 
paragraphs). Chan et al also discloses the storage, receipt, and digital signature 
verification map update of at least Page 1 1 one acceptable message header 
identifier, which becomes a map entry (see page 8, first column, third paragraph, 
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last sentence and page 10, first column, first and second paragraphs). Chan et al 
additionally discloses the verification of a digital signature associated with 
received message information (see page 8, second column, third paragraph; 
page 9, first column, first paragraph', page 9, second column, third paragraph, 
and page 10, first column, second paragraph). Chan et al also discloses 
that the determination of a digital signature verification error includes the 
comparison of a public key certificate identifier with the message header identifier 
(see page 8, second column, third paragraph), the generation of a mismatch 
notification (see "appropriate error code" on page 8, second column, third 
paragraph, second sentence), and the verification of a digital signature based on 
a verification key associated with the public key certificate identifier (See the 
certificate of the stated message source and SID based on this certificate on 
page 8, first column, third paragraph 1 , page 8, second column, third paragraph; 
and page 9, first column, first paragraph. Also see the digital signature of the 
message that ensures the authenticity of the message source and has 
a verification key ensured by the above certificate on page 9, second column, 
third paragraph and page 10, first column, second paragraph.). Chan et al fails to 
expressly disclose the digital signature of the digital signature verification map. 
However, Chan et al does disclose the digital signature of an email message to 
ensure that the message is trustworthy, that it originates from the trusted 
Page 12 message sender listed in the "from" field (see page 9, second column, 
third paragraph). Therefore, it would have been obvious to one of ordinary skill in 
the art at the time the invention was made to modify the method of Chan et al by 
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applying Chan et al's signature technique to the digital signature verification map 
("restricted token") containing the acceptable message header identifiers 
("restricted SIDs"). One of ordinary skill in the art would have motivated to do in 
order to ensure that modifications to the digital signature verification map 
originate from a trustworthy source (see page 9, second column, third paragraph, 
second sentence). 

8. Claim 38 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Chan et al (US20O20019941A1) in view of Schmeidleretal. (6,763,370 B1) as 
applied to claims 1,10, 20, and 29 above, and further in view of Cooper et al 
(US006O52442A). 

As per claim 38 Chan et al discloses the determination of a digital signature 
verification error (see Chan et al-page 8, second column, third paragraph', page 

9, first column, first paragraph', and page 10, first column, second paragraph) 
and the generation of a digital signature verification map (see Chan et al-page 8, 
first column, third paragraph and page 9, second column, third and fourth 
paragraphs). Chan et al also discloses the storage, receipt, and digital signature 
verification map update of at least one acceptable message header identifier, v 
which becomes a map entry (see Chan et al-page 8, first column, third 
paragraph, last sentence and page 10, first column, first and second 
paragraphs). Chan et al additionally discloses the verification of a digital 
signature associated with received message information (see Chan et al-page 8, 
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second column, third paragraph', page 9, first column, first paragraph; page 9, 
second column, third paragraph', and page 10, first Page 13 column, second 
paragraph). Chan et al fails to expressly disclose the generation of a trusted alias 
map and the display of at least one subject alias. However, Cooper et al 
discloses these features (see the directory" t'display" and I'mnemonic tag" in 
Cooper et al-page 9, first column, II second and sixth paragraphs and column 
10, first paragraph). 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to modify the method of Chan et al in view of 
Schmeidler by generating a trusted alias map relating Chan et al's URLS or 
sender email addresses to corresponding mnemonic aliases and by displaying 
these aliases in place of the same URLS and sender email addresses. 
One of ordinary skill in the ad would have been motivated to do so in order to 
facilitate the identification of Chan et al's message sources in view of Schmeidler. 

Allowable Subject Matter 

9. Claims 40-44 are allowed. 

10. Dependent claims 8, 16, 27, 36 and 39 as being dependent upon 
Independent claims 1,10, 20, 29 and 38 and having additional allowable features 
therein. 
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Conclusion 



1 1 . Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Kambiz Zand whose telephone number is 
(571) 272-381 1 . The examiner can normally reached on Monday-Thursday (8:00- 
5:00). If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Gilberto Barron can be reached on (703) 305-1830. The 
fax phone numbers for the organization where this application or proceeding is 
assigned as (703) 872-9306. Information regarding the status of an application 
may be obtained from the Patent Application Information Retrieval (PAIR) 
system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about 
the PAIR system, see http://pair-direct.uspto.gov. Should you have questions on 
access to the Private PAIR system, contact the Electronic Business Center 
(EBC) at 866-217-9197 (toll-free). 
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Kambiz Zand 



12/08/04 



